open-policy-agent / gatekeeper

🐊 Gatekeeper - Policy Controller for Kubernetes
https://open-policy-agent.github.io/gatekeeper/
Apache License 2.0
3.63k stars 744 forks source link

move emitAdmissionEvents and emitAuditEvents to beta #3442

Open DorB-P opened 3 months ago

DorB-P commented 3 months ago

Describe the solution you'd like This issue is to discuss the reasons why these are still in alpha. Any blocker to move to beta?

Anything else you would like to add: Later on, I'd like to emit allow admission events as well #3440 . Would love to hear your thoughts on the matter - issues/limitations you can think of.

Thanks

ritazh commented 3 months ago

No major concerns from me to move it to beta.

stale[bot] commented 1 month ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 14 days if no further activity occurs. Thank you for your contributions.

ritazh commented 2 weeks ago

@maxsmythe @sozercan wdyt?

maxsmythe commented 2 weeks ago

Do we have a target use case for these given the limitations (e.g. expectation of throttling)? Do we expect the API to change in any way?

Move from alpha to beta is gated on API stability and confidence that feature will not go away. (Not suggesting that feature will go away, just dunno if we've revisited the use case given events' non-viability for full state xfer due to throttling).

Expectations of throttling would be increased if we added support for admission events, since that would increase the frequency of event admission (dependent on QPS to K8s API server).